Описание
In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 1.4.15-1 |
| devel | not-affected | 1.4.15-1 |
| esm-apps-legacy/xenial | released | 1.4.8-1ubuntu0.16.04.2 |
| esm-apps/bionic | not-affected | 1.4.15-1 |
| esm-apps/xenial | released | 1.4.8-1ubuntu0.16.04.2 |
| esm-infra-legacy/trusty | released | 0.15-2ubuntu1.2 |
| precise/esm | DNE | |
| trusty | released | 0.15-2ubuntu1.2 |
| trusty/esm | released | 0.15-2ubuntu1.2 |
Показывать по
EPSS
2.1 Low
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.
In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) i ...
In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.
ALT-PU-2018-1080: package `mosquitto` update to version 1.4.14-alt1
EPSS
2.1 Low
CVSS2
5.5 Medium
CVSS3